org.mitre.openid.connect.web.UserInfoEndpoint クラス

org.mitre.openid.connect.web.UserInfoEndpoint 連携図

公開メンバ関数
String	getInfo (@RequestParam(value="claims", required=false) String claimsRequestJsonString, @RequestHeader(value=HttpHeaders.ACCEPT, required=false) String acceptHeader, OAuth2Authentication auth, Model model)

静的公開変数類
static final String	URL = "userinfo"

非公開変数類
UserInfoService	userInfoService
ClientDetailsEntityService	clientService

静的非公開変数類
static final Logger	logger = LoggerFactory.getLogger(UserInfoEndpoint.class)

詳解

OpenID Connect UserInfo endpoint, as specified in Standard sec 5 and Messages sec 2.4.

著者

AANGANES

関数詳解

getInfo()

String org.mitre.openid.connect.web.UserInfoEndpoint.getInfo ( @RequestParam(value="claims", required=false) String  claimsRequestJsonString, @RequestHeader(value=HttpHeaders.ACCEPT, required=false) String  acceptHeader, OAuth2Authentication  auth, Model  model  )

inline

Get information about the user as specified in the accessToken included in this request

                                                                {

                if (auth == null) {
                        logger.error("getInfo failed; no principal. Requester is not authorized.");
                        model.addAttribute(HttpCodeView.CODE, HttpStatus.FORBIDDEN);
                        return HttpCodeView.VIEWNAME;
                }

                String username = auth.getName();
                UserInfo userInfo = userInfoService.getByUsernameAndClientId(username, auth.getOAuth2Request().getClientId());

                if (userInfo == null) {
                        logger.error("getInfo failed; user not found: " + username);
                        model.addAttribute(HttpCodeView.CODE, HttpStatus.NOT_FOUND);
                        return HttpCodeView.VIEWNAME;
                }

                model.addAttribute(UserInfoView.SCOPE, auth.getOAuth2Request().getScope());

                model.addAttribute(UserInfoView.AUTHORIZED_CLAIMS, auth.getOAuth2Request().getExtensions().get("claims"));

                if (!Strings.isNullOrEmpty(claimsRequestJsonString)) {
                        model.addAttribute(UserInfoView.REQUESTED_CLAIMS, claimsRequestJsonString);
                }

                model.addAttribute(UserInfoView.USER_INFO, userInfo);

                // content negotiation

                // start off by seeing if the client has registered for a signed/encrypted JWT from here
                ClientDetailsEntity client = clientService.loadClientByClientId(auth.getOAuth2Request().getClientId());
                model.addAttribute(UserInfoJWTView.CLIENT, client);

                List<MediaType> mediaTypes = MediaType.parseMediaTypes(acceptHeader);
                MediaType.sortBySpecificityAndQuality(mediaTypes);

                if (client.getUserInfoSignedResponseAlg() != null
                                || client.getUserInfoEncryptedResponseAlg() != null
                                || client.getUserInfoEncryptedResponseEnc() != null) {
                        // client has a preference, see if they ask for plain JSON specifically on this request
                        for (MediaType m : mediaTypes) {
                                if (!m.isWildcardType() && m.isCompatibleWith(UserInfoJWTView.JOSE_MEDIA_TYPE)) {
                                        return UserInfoJWTView.VIEWNAME;
                                } else if (!m.isWildcardType() && m.isCompatibleWith(MediaType.APPLICATION_JSON)) {
                                        return UserInfoView.VIEWNAME;
                                }
                        }

                        // otherwise return JWT
                        return UserInfoJWTView.VIEWNAME;
                } else {
                        // client has no preference, see if they asked for JWT specifically on this request
                        for (MediaType m : mediaTypes) {
                                if (!m.isWildcardType() && m.isCompatibleWith(MediaType.APPLICATION_JSON)) {
                                        return UserInfoView.VIEWNAME;
                                } else if (!m.isWildcardType() && m.isCompatibleWith(UserInfoJWTView.JOSE_MEDIA_TYPE)) {
                                        return UserInfoJWTView.VIEWNAME;
                                }
                        }

                        // otherwise return JSON
                        return UserInfoView.VIEWNAME;
                }

        }

メンバ詳解

clientService

ClientDetailsEntityService org.mitre.openid.connect.web.UserInfoEndpoint.clientService

private

logger

final Logger org.mitre.openid.connect.web.UserInfoEndpoint.logger = LoggerFactory.getLogger(UserInfoEndpoint.class)

staticprivate

Logger for this class

URL

final String org.mitre.openid.connect.web.UserInfoEndpoint.URL = "userinfo"

static

userInfoService

UserInfoService org.mitre.openid.connect.web.UserInfoEndpoint.userInfoService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoEndpoint.java